mirror/ ansible-nginx-hardening
1
0
Fork 0
mirror of https://github.com/dev-sec/ansible-nginx-hardening.git synced 2024-05-25 02:46:28 +02:00
Code Issues Releases Activity

imove chmod to end because of generated files 

Signed-off-by: Martin Schurz <Martin.Schurz@t-systems.com>
This commit is contained in:
Martin Schurz 2020-08-24 11:01:07 +02:00
parent 29a43568e6
commit a881cf2d40
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
tasks/main.yml
View File

@ -1,12 +1,4 @@
---
- name: config should not be worldwide read- or writeable
file:
path: "/etc/nginx"
mode: "o-rw"
owner: "root"
group: "root"
recurse: true
- name: create additional configuration
template:
src: "hardening.conf.j2"
@ -97,3 +89,11 @@
args:
creates: "/etc/nginx/dh{{ nginx_dh_size }}.pem"
notify: restart nginx
- name: config should not be worldwide read- or writeable
file:
path: "/etc/nginx"
mode: "o-rw"
owner: "root"
group: "root"
recurse: true